Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Jan 2006 02:06:30 +0100
From:      cpghost <cpghost@cordula.ws>
To:        Peter <petermatulis@yahoo.ca>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ppp and pf interacting badly?
Message-ID:  <20060128010630.GA38672@epia2.farid-hajji.net>
In-Reply-To: <20060128001214.90433.qmail@web60024.mail.yahoo.com>
References:  <20060127230539.GA60009@epia2.farid-hajji.net> <20060128001214.90433.qmail@web60024.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 27, 2006 at 07:12:14PM -0500, Peter wrote:
> --- cpghost <cpghost@cordula.ws> wrote:
> > Is there any way to tell pf startup script to wait for ppp
> > until all needed interfaces have really come up?
> 
> >From the OpenBSD 3.8 manpage (should be good for you):
> 
> Host name resolution and interface to address translation are done
> at ruleset load-time.  When the address of an interface (or host
> name) changes (under DHCP or PPP, for instance), the ruleset must
> be reloaded for the change to be reflected in the kernel.  Sur-
> rounding the interface name (and optional modifiers) in parentheses
> changes this behaviour.  When the interface name is surrounded by
> parentheses, the rule is automatically updated whenever the inter-
> face changes its address.  The ruleset does not need to be reload-
> ed.  This is especially useful with nat.

Ah, good point! I'll try this on the next maintenance window!
Thanks for the valuable hint.

Are you sure it also works for interfaces that don't exist yet?
It's not a question of tun0 changing addresses (static IP in
this particular case), but of tun0 not existing before ppp has
a chance to start at all?

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060128010630.GA38672>